longitude-one/spatial-types

Maintainerscaution

Only one registry account has publish access. The organization-backed repository provides some continuity, but the registry publishing role remains concentrated.

Repo bus factorcaution

All 103 recent commits came from one contributor, giving the project a 100% top-contributor share. Organization ownership offers some handoff capacity, but no second active contributor is shown.

Security policycaution

No repository security policy was found. This is a transparency gap, although active maintenance and security scanning provide partial compensation.

Version stabilitycaution

1.0.0-beta is marked as a stable major but remains a prerelease, and all recent releases are prereleases. That signals some API maturity risk, though it is not an abandonment concern.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, all nine action references are unpinned, leaving avoidable build-integrity risk.